certificate extension - Kerberos

This is a discussion on certificate extension - Kerberos ; Hi all,
I have a problem in retaining the X509 extension in the end certificate which will be submitted to kdc.
i generate the certificate using the openssl tool this what it looks like .
openssl req -new -newkey rsa:1024 ...